Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027

Ars Technica security feed covering active exploitation, major breaches, counterfeit TLS certificates, AI-agent and MCP security risks, exploit kits, phishing and ClickFix campaigns, ransomware or disruptive attacks, surveillance-camera exposure, cryptographic research, and defensive ecosystem changes. The most urgent items involve exploited critical Zimbra vulnerabilities, counterfeit certificates obtained through compromised registries, widespread exploit-kit use against Chrome and Windows, and large-scale account compromises.